{"metadata": {"vulnerability": "ghsa-xg8h-j46f-w952", "count": 17, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-05-19T15:46:00.396Z", "date_only": false, "value": "2025-05-19T15:46:00.396Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-48379", "record": "CVE-2025-48379", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-07-01T17:29:37Z", "date_only": false, "value": "2025-07-01T17:29:37Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-xg8h-j46f-w952", "field": "published"}, {"timestamp": "2025-07-01T18:33:30.687Z", "date_only": false, "value": "2025-07-01T18:33:30.687Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-48379", "record": "CVE-2025-48379", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-07-01T18:33:30.687Z", "date_only": false, "value": "2025-07-01T18:33:30.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-48379 / GitHub_M", "record": "CVE-2025-48379", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-01T19:09:21Z", "date_only": false, "value": "2025-07-01T19:09:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20075", "record": "GHSA-XG8H-J46F-W952", "field": "creation_timestamp", "uuid": "ee14df8b-5be7-43e0-b2a4-d5c8e7575e8c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48379\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0.\n\ud83d\udccf Published: 2025-07-01T18:33:30.687Z\n\ud83d\udccf Modified: 2025-07-01T18:33:30.687Z\n\ud83d\udd17 References:\n1. https://github.com/python-pillow/Pillow/security/advisories/GHSA-xg8h-j46f-w952\n2. https://github.com/python-pillow/Pillow/pull/9041\n3. https://github.com/python-pillow/Pillow/commit/ef98b3510e3e4f14b547762764813d7e5ca3c5a4\n4. https://github.com/python-pillow/Pillow/releases/tag/11.3.0", "url": "https://t.me/DarkWebInformer_CVEAlerts/20075"}, {"timestamp": "2025-07-01T19:11:55.656Z", "date_only": false, "value": "2025-07-01T19:11:55.656212Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114779561289242286", "record": "GHSA-xg8h-j46f-w952", "field": "creation_timestamp", "uuid": "dbe3432e-66ec-4e9d-bf77-5560e93e2da2", "url": "https://infosec.exchange/users/cR0w/statuses/114779561289242286"}, {"timestamp": "2025-07-01T19:15:27Z", "date_only": false, "value": "2025-07-01T19:15:27Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-xg8h-j46f-w952", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-07-01T19:15:27Z", "date_only": false, "value": "2025-07-01T19:15:27Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2025-61", "record": "PYSEC-2025-61", "field": "published"}, {"timestamp": "2025-07-01T19:42:09.269Z", "date_only": false, "value": "2025-07-01T19:42:09.269034Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-48379 / CISA-ADP", "record": "CVE-2025-48379", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-07-01T19:42:22.348Z", "date_only": false, "value": "2025-07-01T19:42:22.348Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-48379", "record": "CVE-2025-48379", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-07-01T19:42:22.348Z", "date_only": false, "value": "2025-07-01T19:42:22.348Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-48379 / CISA-ADP", "record": "CVE-2025-48379", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-02T14:20:24Z", "date_only": false, "value": "2025-07-02T14:20:24Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-xg8h-j46f-w952", "field": "modified"}, {"timestamp": "2025-07-07T14:12:46.226Z", "date_only": false, "value": "2025-07-07T14:12:46.226030Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2025-61", "record": "PYSEC-2025-61", "field": "modified"}, {"timestamp": "2026-08-13T16:35:12Z", "date_only": false, "value": "2026-08-13T16:35:12Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2025-48379", "record": "BREW-AIDER-CVE-2025-48379", "field": "published"}, {"timestamp": "2026-08-13T17:28:20Z", "date_only": false, "value": "2026-08-13T17:28:20Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PILLOW-CVE-2025-48379", "record": "BREW-PILLOW-CVE-2025-48379", "field": "published"}, {"timestamp": "2026-09-09T23:40:56Z", "date_only": false, "value": "2026-09-09T23:40:56Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2025-48379", "record": "BREW-AIDER-CVE-2025-48379", "field": "modified"}, {"timestamp": "2026-10-08T00:59:58Z", "date_only": false, "value": "2026-10-08T00:59:58Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PILLOW-CVE-2025-48379", "record": "BREW-PILLOW-CVE-2025-48379", "field": "modified"}]}